// https://syzkaller.appspot.com/bug?id=132191a7dbc356c4e9e10c804f613fb69db71252 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include uint64_t r[1] = {0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; res = syscall(__NR_socket, 0x2bul, 1ul, 0); if (res != -1) r[0] = res; *(uint32_t*)0x20000000 = 1; syscall(__NR_setsockopt, r[0], 6, 0x13, 0x20000000ul, 4ul); *(uint16_t*)0x200001c0 = 2; *(uint16_t*)0x200001c2 = htobe16(0); *(uint8_t*)0x200001c4 = 0xac; *(uint8_t*)0x200001c5 = 0x14; *(uint8_t*)0x200001c6 = 0x14; *(uint8_t*)0x200001c7 = 0xaa; syscall(__NR_connect, r[0], 0x200001c0ul, 0x10ul); syscall(__NR_listen, r[0], 0); memcpy((void*)0x200000c0, "tls\000", 4); syscall(__NR_setsockopt, r[0], 6, 0x1f, 0x200000c0ul, 4ul); *(uint16_t*)0x20000040 = 0x303; *(uint16_t*)0x20000042 = 0x34; memcpy((void*)0x20000044, "\xee\xb1\x8b\x01\x40\x90\x76\x1e", 8); memcpy((void*)0x2000004c, "\xc8\xab\xee\x46\xa5\x30\x75\x2f\xe8\x3b\x9a\x18\x48\x05\x5d\x8b\x56" "\xdd\xed\x17\x12\xa5\x09\xda\xc2\x33\x52\xbc\xe5\xa4\xf8\x5d", 32); memcpy((void*)0x2000006c, "\x6c\x4d\xa5\x67", 4); memcpy((void*)0x20000070, "\000\000\000\000\000\000\000\000", 8); syscall(__NR_setsockopt, r[0], 0x11a, 1, 0x20000040ul, 0x38ul); *(uint64_t*)0x20000100 = 0x20000280; memcpy((void*)0x20000280, "X", 1); *(uint64_t*)0x20000108 = 1; syscall(__NR_writev, r[0], 0x20000100ul, 1ul); return 0; }